01-29-2020 01:56 PM
This seems like it should be so simple but I can;t find any documentation on how to use it. I am doing some policy testing and whatnot and simply want to use the "In" operator to create some inclusions/exclusions for testing. How does this operator function? I assume "in" means if the value is "in" a list of some sort but I can't figure out how to provide a list. Is it just csv, inside brackets, parenthesis...?
01-29-2020 03:23 PM
I have never had to use the "in" operator but my understanding is that it checks a list to see if it is in the list. That list would not be a freeform text list that you input in the textbox. You could have an attribute within LDAP or AD that is created like a list. String values separated by newlines or whatever the system uses for multiple values. Then you could reference that attribute in your conditions. I don't think there would be any attribute within ISE that contains lists but I could be wrong. I also just checked to see if I could create a custom dictionary with a list but it did not look like it.
Would be interested in hearing from anyone that has used it in a policy and what the scenario was.
01-29-2020 03:59 PM - edited 01-29-2020 03:59 PM
Ok actually this works in ISE policy:
Radius-user-name match (user1|user2|user3)
01-29-2020 04:15 PM
The "match" operator uses regex so that makes sense. Maybe with the "in" operator you can try to list out the values separated by spaces. But that would be the same as the "contains" operator.
01-29-2020 08:30 PM - edited 01-29-2020 08:31 PM
Actually the contains operator would be kind of the reverse of the in operator.
user-name contains test
vs
user-name in test1,test2
Still would like to know how to use the in operator or what scenario that would be useful.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide